Skip to main content

💼 3.9 Ensure VPC flow logging is enabled in all VPCs - Level 2 (Automated)

  • ID: /frameworks/cis-aws-v2.0.0/03/09

Description

VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC. After you've created a flow log, you can view and retrieve its data in Amazon CloudWatch Logs. It is recommended that VPC Flow Logs be enabled for packet "Rejects" for VPCs.

Similar

  • Sections
    • /frameworks/cis-aws-v3.0.0/03/07
    • /frameworks/cis-aws-v1.5.0/03/09
  • Internal
    • ID: dec-c-5fcd6731

Similar Sections (Take Policies From)

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS AWS v1.5.0 → 💼 3.9 Ensure VPC flow logging is enabled in all VPCs - Level 2 (Automated)11no data
💼 CIS AWS v3.0.0 → 💼 3.7 Ensure VPC flow logging is enabled in all VPCs - Level 2 (Automated)11no data

Similar Sections (Give Policies To)

SectionSub SectionsInternal RulesPoliciesFlagsCompliance
💼 CIS AWS v1.5.0 → 💼 3.9 Ensure VPC flow logging is enabled in all VPCs - Level 2 (Automated)11no data
💼 CIS AWS v3.0.0 → 💼 3.7 Ensure VPC flow logging is enabled in all VPCs - Level 2 (Automated)11no data

Sub Sections

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)

PolicyLogic CountFlagsCompliance
🛡️ AWS VPC Flow Logs are not enabled🟢1🟠 x1, 🟢 x5no data

Internal Rules

RulePoliciesFlags
✉️ dec-x-9c0416671